Ipswitch IMail 'SMTPDLL.dll ' Multiple Remote Code Execution Vulnerabilities

Bugtraq ID:	41718
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Jul 15 2010 12:00AM
Updated:	Jul 15 2010 12:00AM
Credit:	Anonymous researcher working with Zero Day Initiative
Vulnerable:	Ipswitch IMail Server 11.01
Not Vulnerable:	Ipswitch IMail Server 11.02

Ipswitch IMail 'SMTPDLL.dll ' Multiple Remote Code Execution Vulnerabilities

Ipswitch IMail is prone to multiple remote code-execution vulnerabilities, including:

1. An format-string vulnerability
2. A stack-based buffer-overflow vulnerability

An attacker can exploit these issues to execute arbitrary code with SYSTEM-level privileges. Successfully exploiting these issues will result in the complete compromise of affected computers. Failed exploit attempts will result in a denial-of-service condition.

Ipswitch IMail 'SMTPDLL.dll ' Multiple Remote Code Execution Vulnerabilities

Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Ipswitch IMail 'SMTPDLL.dll ' Multiple Remote Code Execution Vulnerabilities

Solution:
Vendor fixes are available; please see the references for more information.

Ipswitch IMail 'SMTPDLL.dll ' Multiple Remote Code Execution Vulnerabilities

References:

• IMail Server Homepage (Ipswitch)
  
• Zero Day Initiative Security Advisory ZDI-10-128 (Zero Day Initiative)